Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    GDPR compliance

    Scheduled Pinned Locked Moved General pfSense Questions
    6 Posts 4 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mdes
      last edited by

      Is anyone dealing with this?
      I have done quick preliminary analysis and the result is that I would need to have ability to set log retention period for captive portal logs.

      1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad
        last edited by

        There's nothing to deal with.

        Set up a syslog server and store the data there.

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        1 Reply Last reply Reply Quote 0
        • M
          mdes
          last edited by

          @NogBadTheBad:

          There's nothing to deal with.

          Set up a syslog server and store the data there.

          But data (logs) remains also inside pfSense because remote syslogging means take a log and copy it to remote machine.

          1 Reply Last reply Reply Quote 0
          • GertjanG
            Gertjan
            last edited by

            @mdes:

            But data (logs) remains also inside pfSense because remote syslogging means take a log and copy it to remote machine.

            Have a look at these logs first  ;)

            Btw : pfSense uses circular logs that have a fixed size. This means that ones they are full, old information is overwritten. Which implies that old information will be is destroyed in a nearby future. They are auto-cleaning !

            As long as you, as an an admin, are not logging all kind of information like user traffic with the help of packages like, for example,  squid , you have nothing to do with this "private act".
            IP addresses, and even MAC addresses, are not considered as "private info" **.
            And even if you do, thing about destroying the info - and never use the info. Doing so, and you'll be fine for more then 99 %.
            Facebook and Google will take care of the latter 1 % soon.

            GDPR compliance, or not, it's true that many countries ask to log (local - so worth-less) IP addresses and MAC addresses when you offer an Internet access (with the help of the captive portal).

            ** and if they were, well, the guy who pretends so should not be using the "Internet" anymore as a public communication channel.

            No "help me" PM's please. Use the forum, the community will thank you.
            Edit : and where are the logs ??

            1 Reply Last reply Reply Quote 0
            • C
              conor
              last edited by

              @mdes

              IP addresses are regarded as PII under GDPR, see ECJ ruling. Explanation here:

              https://www.enterprisetimes.co.uk/2016/10/20/ecj-rules-ip-address-is-pii/

              You'll need to have a "right to be forgotten" process for that log data plus you probably will have to declare the logs existence in your data policies.

              200+ pfSense installs - best firewall ever.

              1 Reply Last reply Reply Quote 0
              • C
                conor
                last edited by

                @mdes

                So you're probably aware of the following but it does cover what i understand to be the most relevant aspects of GDPR in relation to a pfSense device.

                https://www.firewallhardware.it/en/gdpr-pfsense-opnsense/

                You'll know what you are using the device for, so some aspects will affect you more than others.

                200+ pfSense installs - best firewall ever.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.